[Buildroot] [PATCH 1/1] package/tcpreplay: security bump to version 4.3.4

Thomas Petazzoni thomas.petazzoni at bootlin.com
Thu Dec 30 22:49:51 UTC 2021


On Thu, 30 Dec 2021 23:36:06 +0100
Fabrice Fontaine <fontaine.fabrice at gmail.com> wrote:

> - heap buffer overflow in tcpreplay fast_edit_packet
> - heap buffer overflow in tcpreplay get_next_packet
> - CVE-2020-24266 heap buffer overflow in tcpprep get_l2len
> - CVE-2020-24265 heap buffer overflow in tcpprep
> - Drop patch (already in version) and so autoreconf
> - Update hash of license file (http -> https with
>   https://github.com/appneta/tcpreplay/commit/ad8a18005347b3cef84a9b478d56de96d1ad254f)
> 
> https://github.com/appneta/tcpreplay/releases/tag/v4.3.4
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
> ---
>  ...001-configure-ac-fix-without-libdnet.patch | 76 -------------------
>  package/tcpreplay/tcpreplay.hash              |  6 +-
>  package/tcpreplay/tcpreplay.mk                |  4 +-
>  3 files changed, 4 insertions(+), 82 deletions(-)
>  delete mode 100644 package/tcpreplay/0001-configure-ac-fix-without-libdnet.patch

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com



More information about the buildroot mailing list